DNS subdomain scraping techniques Source: https://www.youtube.com/watch?v=C4ZHAdI8o1w
gobuster -m dns -u $DOMAIN -t 100 -w all.txt
./subbrute.py all.txt $DOMAIN | massdns -r resolvers.txt -t A -a -o -w massdns_output.txt -